Privacy Policy

Learn how we collect, use, and protect your personal data on our reef aquarium platform.

Version 1Last updated: October 29, 2026

Last Updated: October 23, 2026

Data Controller:
Marc Dobler - Reef Garbage
Route du Signal 4, 1350 Orbe, Switzerland
Email: info@reefgarbage.ch
Website: www.reefgarbage.ch

1. Data We Collect

Account Data (Firebase Authentication):

Email and password OR Google authentication
Technical identifiers, session management, and security data

Reef Data (Firestore):

Tank parameters: pH, KH, Ca, Mg, NO3, PO4, salinity, etc.
Logbook entries, notes, maintenance actions
Equipment, routines, and saved configurations

Media Content (Firebase Storage):

Photos and media you upload (tank images, corals, fish)

Technical Data:

Security logs, error diagnostics, performance metrics
Aggregate audience statistics via Vercel Analytics

Subscription Data (Stripe):

Subscription status, billing history, transaction IDs
Credit card data is processed by Stripe and NOT stored by Reef Garbage

2. Why We Process Your Data

Service Provision: Account creation/management, synchronization, storage
Security: Abuse prevention, bug fixing, incident management
Payments: Subscription management and accounting obligations
Analytics: Audience measurement and product improvement
Support: User assistance

3. Legal Basis

Contract performance (service provision, subscription)
Legitimate interest (security, product improvement)
Legal obligation (accounting, taxation)
Consent (for non-essential tracking, if added in the future)

4. Third-Party Processors

Vercel (hosting, Vercel Analytics)
Google Firebase (Auth, Firestore, Storage)
Stripe (payments and subscriptions)
Upstash (rate limiting)
Sentry (error monitoring)
Google reCAPTCHA (bot and abuse protection)

These processors may process data outside Switzerland/EEA according to their infrastructure, with appropriate safeguards applied when required.

5. Data Retention

Account & reef data: Retained while account is active. After deletion: operational deletion within 30 days, backup purge within 90 days
Security logs: 90 days
Error logs: 180 days
Support emails: 24 months
Billing records: 10 years from end of fiscal year
Vercel Analytics: Session visitor data discarded after 24h per provider documentation

6. Security

Reasonable measures: access control, encryption in transit, logging, backups, limited internal access.

7. Your Rights

For any request (access, rectification, deletion, etc.): info@reefgarbage.ch

We may request reasonable proof of identity before processing certain requests.

8. Cookies

See our Cookie Policy page.

9. Shop statistics

To learn which products are in demand, and in what quantities, the shop keeps aggregated counters per product and per day: product page views, adds to cart, purchases and quantities bought, interest in items whose price is not published yet, and restock alert sign-ups. When a visitor outside Switzerland and Liechtenstein tries to add an item to the cart, only their country code is counted.

These statistics contain no personal data: no name, email address, account, IP address, or browser or device identifier. They are not used to build a profile, and no cookie is set for them.

Your IP address is used briefly, and is not stored with these statistics, to limit abuse and to count a view at most once per hour. For the latter, our rate-limiting provider, Upstash, holds a pseudonymous key (a SHA-256 hash of the IP address, the product and the event) for at most one hour, after which it expires automatically.

Your country is determined by our hosting provider, Vercel, from your connection. It is used only to choose the currency shown and to count, by country, the demand we cannot serve yet.

This processing is based on our legitimate interest in matching the shop's range to actual demand. The counters themselves are aggregated and do not identify anyone.

10. Changes

We may update this policy. The "Last Updated" date reflects the most recent version.